What’s Vulnerable › Vulnerabilities

CVE-2019-15311

• Severity: critical (CVSS 9.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 7.6% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2020-07-01 · updated 2026-06-17
• Weakness: CWE-78

Description

An issue was discovered on Zolo Halo devices via the Linkplay firmware. There is Zolo Halo LAN remote code execution. The Zolo Halo Bluetooth speaker had a GoAhead web server listening on the port 80. The /httpapi.asp endpoint of the GoAhead web server was also vulnerable to multiple command execution vulnerabilities.

Affected products

• Linkplay: all versions

References

• https://labs.f-secure.com/advisories/linkplay-firmware-wanlan-remote-code-execution/
• https://labs.mwrinfosecurity.com/advisories/
• https://linkplay.com/featured-products/
• https://labs.f-secure.com/advisories/linkplay-firmware-wanlan-remote-code-execution/
• https://labs.mwrinfosecurity.com/advisories/
• https://linkplay.com/featured-products/

Get alerted when CVE-2019-15311 or the next vulnerability affects your stack